net.openid.appauth

Class EndSessionRequest

java.lang.Object

net.openid.appauth.EndSessionRequest

All Implemented Interfaces:

AuthorizationManagementRequest

public class EndSessionRequest
extends java.lang.Object
implements AuthorizationManagementRequest

An OpenID end session request.

See Also:

OpenID Connect RP-Initiated Logout 1.0 - draft 01

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	EndSessionRequest.Builder Creates instances of EndSessionRequest.

Field Summary

Fields

Modifier and Type	Field and Description
java.util.Map<java.lang.String,java.lang.String>	additionalParameters Additional parameters to be passed as part of the request.
AuthorizationServiceConfiguration	configuration The service’s configuration.
java.lang.String	idTokenHint Previously issued ID Token passed to the end session endpoint as a hint about the End-User’s current authenticated session with the Client
android.net.Uri	postLogoutRedirectUri The client’s redirect URI.
java.lang.String	state An opaque value used by the client to maintain state between the request and callback.
java.lang.String	uiLocales This is a space-separated list of BCP47 [RFC5646] language tag values, ordered by preference.

Method Summary

Modifier and Type	Method and Description
java.lang.String	getState() An opaque value used by the client to maintain state between the request and callback.
java.util.Set<java.lang.String>	getUiLocales()
static EndSessionRequest	jsonDeserialize(org.json.JSONObject json) Reads an authorization request from a JSON string representation produced by jsonSerialize().
static EndSessionRequest	jsonDeserialize(java.lang.String jsonStr) Reads an authorization request from a JSON string representation produced by jsonSerializeString().
org.json.JSONObject	jsonSerialize() Produces a JSON representation of the end session request for persistent storage or local transmission (e.g.
java.lang.String	jsonSerializeString() Produces a JSON string representation of the request for persistent storage or local transmission (e.g.
android.net.Uri	toUri() Produces a request URI, that can be used to dispatch the request.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

configuration

@NonNull
public final AuthorizationServiceConfiguration configuration

The service’s configuration. This configuration specifies how to connect to a particular OAuth provider. Configurations may be AuthorizationServiceConfiguration(Uri, Uri, Uri, Uri) created manually}, or AuthorizationServiceConfiguration.fetchFromUrl(Uri, AuthorizationServiceConfiguration.RetrieveConfigurationCallback) via an OpenID Connect Discovery Document}.

idTokenHint

@Nullable
public final java.lang.String idTokenHint

Previously issued ID Token passed to the end session endpoint as a hint about the End-User’s current authenticated session with the Client

See Also:

OpenID Connect Session Management 1.0 - draft 28, 5 RP-Initiated Logout, OpenID Connect Core ID Token, Section 2

postLogoutRedirectUri

@Nullable
public final android.net.Uri postLogoutRedirectUri

The client’s redirect URI.

See Also:

OpenID Connect RP-Initiated Logout 1.0 - draft 1, 3. Redirection to RP After Logout

state

@Nullable
public final java.lang.String state

An opaque value used by the client to maintain state between the request and callback. If this value is not explicitly set, this library will automatically add state and perform appropriate validation of the state in the authorization response. It is recommended that the default implementation of this parameter be used wherever possible. Typically used to prevent CSRF attacks, as recommended in

See Also:

OpenID Connect RP-Initiated Logout 1.0 - draft 1, 2. RP-Initiated Logout, The OAuth 2.0 Authorization Framework (RFC 6749), Section 5.3.5

uiLocales

@Nullable
public final java.lang.String uiLocales

This is a space-separated list of BCP47 [RFC5646] language tag values, ordered by preference. It represents End-User’s preferred languages and scripts for the user interface.

See Also:

OpenID Connect RP-Initiated Logout 1.0 - draft 01

additionalParameters

@NonNull
public final java.util.Map<java.lang.String,java.lang.String> additionalParameters

Additional parameters to be passed as part of the request.

See Also:

The OAuth 2.0 Authorization Framework (RFC 6749), Section 3.1

Method Detail

getState

@Nullable
public java.lang.String getState()

Description copied from interface: AuthorizationManagementRequest

An opaque value used by the client to maintain state between the request and callback.

Specified by:

getState in interface AuthorizationManagementRequest

getUiLocales

public java.util.Set<java.lang.String> getUiLocales()

toUri

public android.net.Uri toUri()

Description copied from interface: AuthorizationManagementRequest

Produces a request URI, that can be used to dispatch the request.

Specified by:

toUri in interface AuthorizationManagementRequest

jsonSerialize

public org.json.JSONObject jsonSerialize()

Produces a JSON representation of the end session request for persistent storage or local transmission (e.g. between activities).

Specified by:

jsonSerialize in interface AuthorizationManagementRequest

jsonSerializeString

public java.lang.String jsonSerializeString()

Produces a JSON string representation of the request for persistent storage or local transmission (e.g. between activities). This method is just a convenience wrapper for jsonSerialize(), converting the JSON object to its string form.

Specified by:

jsonSerializeString in interface AuthorizationManagementRequest

jsonDeserialize

public static EndSessionRequest jsonDeserialize(@NonNull
                                                org.json.JSONObject json)
                                         throws org.json.JSONException

Reads an authorization request from a JSON string representation produced by jsonSerialize().

Throws:

org.json.JSONException - if the provided JSON does not match the expected structure.

jsonDeserialize

@NonNull
public static EndSessionRequest jsonDeserialize(@NonNull
                                                         java.lang.String jsonStr)
                                                  throws org.json.JSONException

Reads an authorization request from a JSON string representation produced by jsonSerializeString(). This method is just a convenience wrapper for jsonDeserialize(JSONObject), converting the JSON string to its JSON object form.

Throws:

org.json.JSONException - if the provided JSON does not match the expected structure.